Why not use Dependabot?

Because it doesn’t support pnpm:

https://github.com/dependabot/dependabot-core/issues/1736

To pin or not to pin

Renovate prefers prinned Dependencies

Should you Pin your JavaScript Dependencies? - Renovate Docs

If you want to adjust it, cf. here for more details:

Configuration Options - Renovate Docs

Frequently Asked Questions (FAQ) - Renovate Docs